A "compromised" email address usually means it appeared in a data breach (its associated password, or other personal data, was exposed) — not necessarily that the mailbox itself was actively broken into.
Signs to check for
- The address appears in a public breach database lookup
- Unexpected password reset emails you didn’t request
- Login notifications from unfamiliar locations or devices
- Contacts reporting spam or phishing emails apparently sent from your address
What to do
- Change the password immediately, and on any other account that reused it
- Enable multi-factor authentication if not already active
- Review the account’s recovery email/phone and connected app permissions for anything unfamiliar
FAQ
Should I close a compromised email account?
Usually not necessary — securing it (new password, MFA, reviewing connected apps) is normally sufficient; closing it can create its own problems if other services depend on it for recovery.